docker-compose.yaml

name: mapache

services:
  kerbecs:
    container_name: mapache-kerbecs
    image: bk1031/kerbecs:latest
    restart: unless-stopped
    ports:
      - "10310:10310"
      - "10300:10300"
    volumes:
      - ./kerbecs.yaml:/etc/kerbecs/kerbecs.yaml:ro
    environment:
      ENV: "DEV"
      KERBECS_CONFIG: /etc/kerbecs/kerbecs.yaml
      KERBECS_USER: "admin"
      KERBECS_PASSWORD: "admin"
    depends_on:
      - auth
      - vehicle
      - gr26
      - live
      - query
      - foreman
      - dashboard

  auth:
    container_name: mapache-auth
    build:
      context: .
      dockerfile: auth/Dockerfile.dev
    restart: unless-stopped
    ports:
      - "7002:7002"
    volumes:
      - ./auth:/app/auth
      - auth_go_cache:/go
    environment:
      ENV: "DEV"
      PORT: "7002"
      DATABASE_HOST: ${DATABASE_HOST}
      DATABASE_PORT: ${DATABASE_PORT}
      DATABASE_NAME: ${DATABASE_NAME}
      DATABASE_USER: ${DATABASE_USER}
      DATABASE_PASSWORD: ${DATABASE_PASSWORD}
      KERBECS_ENDPOINT: "http://kerbecs:10300"
      KERBECS_USER: "admin"
      KERBECS_PASSWORD: "admin"
      SENTINEL_URL: ${SENTINEL_URL}
      SENTINEL_CLIENT_ID: ${SENTINEL_CLIENT_ID}
      SENTINEL_CLIENT_SECRET: ${SENTINEL_CLIENT_SECRET}
      SENTINEL_SA_TOKEN: ${SENTINEL_SA_TOKEN}
      SENTINEL_REDIRECT_URI: ${SENTINEL_REDIRECT_URI}

  vehicle:
    container_name: mapache-vehicle
    build:
      context: .
      dockerfile: vehicle/Dockerfile.dev
    restart: unless-stopped
    ports:
      - "7003:7003"
    volumes:
      - ./vehicle:/app/vehicle
      - ./mapache-go:/app/mapache-go
      - vehicle_go_cache:/go
    environment:
      ENV: "DEV"
      PORT: "7003"
      DATABASE_HOST: ${DATABASE_HOST}
      DATABASE_PORT: ${DATABASE_PORT}
      DATABASE_NAME: ${DATABASE_NAME}
      DATABASE_USER: ${DATABASE_USER}
      DATABASE_PASSWORD: ${DATABASE_PASSWORD}
      KERBECS_ENDPOINT: "http://kerbecs:10300"
      KERBECS_USER: "admin"
      KERBECS_PASSWORD: "admin"

  gr26:
    container_name: mapache-gr26
    build:
      context: .
      dockerfile: gr26/Dockerfile.dev
    restart: unless-stopped
    depends_on:
      - nanomq
      - clickhouse
    ports:
      - "7005:7005"
    volumes:
      - ./gr26:/app/gr26
      - ./mapache-go:/app/mapache-go
      - gr26_go_cache:/go
    environment:
      ENV: "DEV"
      PORT: "7005"
      MQTT_HOST: "nanomq"
      MQTT_PORT: "1883"
      MQTT_USER: "gr26"
      MQTT_PASSWORD: "gr26"
      CLICKHOUSE_HOST: "clickhouse"
      CLICKHOUSE_PORT: "9000"
      CLICKHOUSE_USER: "default"
      CLICKHOUSE_PASSWORD: ""
      CLICKHOUSE_DATABASE: "mapache"
      KERBECS_ENDPOINT: "http://kerbecs:10300"
      KERBECS_USER: "admin"
      KERBECS_PASSWORD: "admin"
      SKIP_AUTH_CHECK: "true"
      VEHICLE_UPLOAD_KEY_CACHE_TTL: "600"
      FOREMAN_ENDPOINT: "http://foreman:7011"
      NUM_WORKERS: "1"
      SHELTER_S3_BUCKET: "gaucho-racing"
      SHELTER_S3_REGION: "us-west-2"
      SHELTER_S3_PREFIX: "epic-shelter/tcm-26/"
      AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID}
      AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY}

  live:
    container_name: mapache-live
    build:
      context: .
      dockerfile: live/Dockerfile.dev
    restart: unless-stopped
    depends_on:
      - nanomq
    ports:
      - "7015:7015"
    volumes:
      - ./live:/app/live
      - ./mapache-go:/app/mapache-go
      - live_go_cache:/go
    environment:
      ENV: "DEV"
      PORT: "7015"
      MQTT_HOST: "nanomq"
      MQTT_PORT: "1883"
      MQTT_USER: "live"
      MQTT_PASSWORD: "live"
      CACHE_WINDOW_SEC: "60"

  query:
    container_name: mapache-query
    build:
      context: .
      dockerfile: query/Dockerfile.dev
    restart: unless-stopped
    depends_on:
      - clickhouse
    ports:
      - "7010:7010"
    volumes:
      - ./query:/app/query
    environment:
      ENV: "DEV"
      PORT: "7010"
      DATABASE_HOST: ${DATABASE_HOST}
      DATABASE_PORT: ${DATABASE_PORT}
      DATABASE_NAME: ${DATABASE_NAME}
      DATABASE_USER: ${DATABASE_USER}
      DATABASE_PASSWORD: ${DATABASE_PASSWORD}
      CLICKHOUSE_HOST: ${CLICKHOUSE_HOST}
      CLICKHOUSE_PORT: ${CLICKHOUSE_PORT}
      CLICKHOUSE_USER: ${CLICKHOUSE_USER}
      CLICKHOUSE_PASSWORD: ${CLICKHOUSE_PASSWORD}
      CLICKHOUSE_DATABASE: ${CLICKHOUSE_DATABASE}
      KERBECS_ENDPOINT: "http://kerbecs:10300"
      KERBECS_USER: "admin"
      KERBECS_PASSWORD: "admin"
      SENTINEL_URL: ${SENTINEL_URL}
      SENTINEL_CLIENT_ID: ${SENTINEL_CLIENT_ID}

  foreman:
    container_name: mapache-foreman
    # Foreman lives in its own repo now (github.com/gaucho-racing/Foreman).
    # Local dev pulls the same image prod runs. Bump in lockstep with the
    # infra manifest; FOREMAN_TABLE_PREFIX defaults to "foreman_" so the
    # tables don't collide with the host app's schema.
    image: ghcr.io/gaucho-racing/foreman:2.0.2
    restart: unless-stopped
    ports:
      - "7011:7011"
    environment:
      ENV: "DEV"
      PORT: "7011"
      DATABASE_HOST: ${DATABASE_HOST}
      DATABASE_PORT: ${DATABASE_PORT}
      DATABASE_NAME: ${DATABASE_NAME}
      DATABASE_USER: ${DATABASE_USER}
      DATABASE_PASSWORD: ${DATABASE_PASSWORD}

  dashboard:
    container_name: mapache-dashboard
    build:
      context: .
      dockerfile: dashboard/Dockerfile.dev
    restart: unless-stopped
    ports:
      - "5173:5173"
    volumes:
      - ./dashboard:/app/dashboard
      - dashboard_node_modules:/app/dashboard/node_modules
    environment:
      VITE_BACKEND_URL: "http://localhost:10310/api"
      VITE_BACKEND_WS_URL: "ws://localhost:10310/api"
      VITE_SENTINEL_CLIENT_ID: ${SENTINEL_CLIENT_ID}
      VITE_MAPBOX_ACCESS_TOKEN: ${MAPBOX_ACCESS_TOKEN}

  nanomq:
    container_name: mapache-nanomq
    image: emqx/nanomq:latest
    restart: unless-stopped
    ports:
      - "1883:1883"

  clickhouse:
    container_name: mapache-clickhouse
    image: clickhouse/clickhouse-server:26.3-alpine
    restart: unless-stopped
    environment:
      CLICKHOUSE_DB: "mapache"
      CLICKHOUSE_USER: "default"
      CLICKHOUSE_PASSWORD: ""
      # Stock image's default user already allows password-less access from
      # any host; this just makes that explicit for local dev.
      CLICKHOUSE_DEFAULT_ACCESS_MANAGEMENT: "1"
    ports:
      - "8123:8123"  # HTTP (query service / clickhouse-connect)
      - "9000:9000"  # native protocol (gr26 / clickhouse-go)
    ulimits:
      nofile:
        soft: 262144
        hard: 262144
    volumes:
      - clickhouse_data:/var/lib/clickhouse

  db:
    container_name: mapache-db
    image: postgres:18-alpine
    environment:
      POSTGRES_USER: ${DATABASE_USER}
      POSTGRES_PASSWORD: ${DATABASE_PASSWORD}
      POSTGRES_DB: ${DATABASE_NAME}
    ports:
      - "5432:5432"
    volumes:
      # Mount the parent dir, not /var/lib/postgresql/data — pg18+ writes to
      # a version-specific subdir (e.g. /var/lib/postgresql/18/docker).
      - pgdata:/var/lib/postgresql

volumes:
  pgdata:
  clickhouse_data:
  auth_go_cache:
  vehicle_go_cache:
  gr26_go_cache:
  live_go_cache:
  dashboard_node_modules: